Skip to main content

Componentpack

Securing Redis Traffic in HCL Connections with SSH Tunnels

·1123 words·6 mins
At the moment I’m working with a customer to secure all traffic in HCL Connections. The target is to have only encrypted network traffic between servers. Today I started enabling encryption to Redis. This is a documented process, but the documentation is outdated and incomplete.

Elasticsearch7 Update

·478 words·3 mins
CVE-2021-44228 was a very serious problem end of 2021, and we are still finding new occurrences, or security teams scan servers and find vulnerable log4j files. Don’t get me wrong most of these occurrences are not vulnerable any more, because the JVM is hardened like in the Elasticsearch 7 containers, or they use of the JVM parameter -Dlog4j2.formatMsgNoLookups=true.

Elasticsearch index creation problem

·510 words·3 mins
Today I activated Elasticsearch Metrics and Typeahead Search on my demo HCL Connections cluster. To my surprise the indices weren’t created and I got errors on the wsadmin.sh commands. SearchService.createESQuickResultsIndex() I checked the Elasticsearch pods which showed a running state, but the logs showed following messages: